Actually, it's simpler than that. The following three lines were integrated back to "security/apparmor/domain.c" by error:
/* XXX: no_new_privs is not usable with AppArmor yet */ if (bprm->unsafe & LSM_UNSAFE_NO_NEW_PRIVS) return -EPERM;
Technically, these three lines were deprecated by commit c29bceb3.
Actually, it's simpler than that. The following three lines were integrated back to "security/ apparmor/ domain. c" by error:
/* XXX: no_new_privs is not usable with AppArmor yet */ NO_NEW_ PRIVS)
if (bprm->unsafe & LSM_UNSAFE_
return -EPERM;
Technically, these three lines were deprecated by commit c29bceb3.